1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
| const TYPE_REGEX = 'regex'
| const TYPE_URL = 'url'
| const TYPE_PATH = 'path'
|
| const NPM_SECRET = {
| type: TYPE_REGEX,
| pattern: /\b(npms?_)[a-zA-Z0-9]{36,48}\b/gi,
| replacement: `[REDACTED_NPM_SECRET]`,
| }
|
| const AUTH_HEADER = {
| type: TYPE_REGEX,
| pattern: /\b(Basic\s+|Bearer\s+)[\w+=\-.]+\b/gi,
| replacement: `[REDACTED_AUTH_HEADER]`,
| }
|
| const JSON_WEB_TOKEN = {
| type: TYPE_REGEX,
| pattern: /\b[A-Za-z0-9-_]{10,}(?!\.\d+\.)\.[A-Za-z0-9-_]{3,}\.[A-Za-z0-9-_]{20,}\b/gi,
| replacement: `[REDACTED_JSON_WEB_TOKEN]`,
| }
|
| const UUID = {
| type: TYPE_REGEX,
| pattern: /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi,
| replacement: `[REDACTED_UUID]`,
| }
|
| const URL_MATCHER = {
| type: TYPE_REGEX,
| pattern: /(?:https?|ftp):\/\/[^\s/"$.?#].[^\s"]*/gi,
| replacement: '[REDACTED_URL]',
| }
|
| const DEEP_HEADER_AUTHORIZATION = {
| type: TYPE_PATH,
| predicate: ({ path }) => path.endsWith('.headers.authorization'),
| replacement: '[REDACTED_HEADER_AUTHORIZATION]',
| }
|
| const DEEP_HEADER_SET_COOKIE = {
| type: TYPE_PATH,
| predicate: ({ path }) => path.endsWith('.headers.set-cookie'),
| replacement: '[REDACTED_HEADER_SET_COOKIE]',
| }
|
| const REWRITE_REQUEST = {
| type: TYPE_PATH,
| predicate: ({ path }) => path.endsWith('.request'),
| replacement: (input) => ({
| method: input?.method,
| path: input?.path,
| headers: input?.headers,
| url: input?.url,
| }),
| }
|
| const REWRITE_RESPONSE = {
| type: TYPE_PATH,
| predicate: ({ path }) => path.endsWith('.response'),
| replacement: (input) => ({
| data: input?.data,
| status: input?.status,
| headers: input?.headers,
| }),
| }
|
| module.exports = {
| TYPE_REGEX,
| TYPE_URL,
| TYPE_PATH,
| NPM_SECRET,
| AUTH_HEADER,
| JSON_WEB_TOKEN,
| UUID,
| URL_MATCHER,
| DEEP_HEADER_AUTHORIZATION,
| DEEP_HEADER_SET_COOKIE,
| REWRITE_REQUEST,
| REWRITE_RESPONSE,
| }
|
|
